pulumi-gcp 9.1.0a1758264354__py3-none-any.whl → 9.1.0a1758939336__py3-none-any.whl

pulumi_gcp/datastream/stream.py

@@ -1240,6 +1240,110 @@ class Stream(pulumi.CustomResource):
             backfill_none={},
             opts = pulumi.ResourceOptions(depends_on=[bigquery_key_user]))
         ```
+        ### Datastream Stream Bigquery Cross Project Source Hierachy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+        import pulumi_random as random
+        import pulumi_time as time
+
+        project = gcp.organizations.get_project()
+        cross_project_dataset = gcp.organizations.Project("cross-project-dataset",
+            project_id="tf-test_79169",
+            name="tf-test_56529",
+            org_id="123456789",
+            billing_account="000000-0000000-0000000-000000",
+            deletion_policy="DELETE")
+        wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
+        opts = pulumi.ResourceOptions(depends_on=[cross_project_dataset]))
+        bigquery = gcp.projects.Service("bigquery",
+            project=cross_project_dataset.project_id,
+            service="bigquery.googleapis.com",
+            disable_on_destroy=False,
+            opts = pulumi.ResourceOptions(depends_on=[wait60_seconds]))
+        datastream_bigquery_admin = gcp.projects.IAMMember("datastream_bigquery_admin",
+            project=cross_project_dataset.project_id,
+            role="roles/bigquery.admin",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-datastream.iam.gserviceaccount.com",
+            opts = pulumi.ResourceOptions(depends_on=[wait60_seconds]))
+        instance = gcp.sql.DatabaseInstance("instance",
+            name="my-instance",
+            database_version="MYSQL_8_0",
+            region="us-central1",
+            settings={
+                "tier": "db-f1-micro",
+                "backup_configuration": {
+                    "enabled": True,
+                    "binary_log_enabled": True,
+                },
+                "ip_configuration": {
+                    "authorized_networks": [
+                        {
+                            "value": "34.71.242.81",
+                        },
+                        {
+                            "value": "34.72.28.29",
+                        },
+                        {
+                            "value": "34.67.6.157",
+                        },
+                        {
+                            "value": "34.67.234.134",
+                        },
+                        {
+                            "value": "34.72.239.218",
+                        },
+                    ],
+                },
+            },
+            deletion_protection=True)
+        db = gcp.sql.Database("db",
+            instance=instance.name,
+            name="db")
+        pwd = random.RandomPassword("pwd",
+            length=16,
+            special=False)
+        user = gcp.sql.User("user",
+            name="user",
+            instance=instance.name,
+            host="%",
+            password=pwd.result)
+        source_connection_profile = gcp.datastream.ConnectionProfile("source_connection_profile",
+            display_name="Source connection profile",
+            location="us-central1",
+            connection_profile_id="source-profile",
+            mysql_profile={
+                "hostname": instance.public_ip_address,
+                "username": user.name,
+                "password": user.password,
+            })
+        destination_connection_profile = gcp.datastream.ConnectionProfile("destination_connection_profile",
+            display_name="Connection profile",
+            location="us-central1",
+            connection_profile_id="destination-profile",
+            bigquery_profile={})
+        default = gcp.datastream.Stream("default",
+            stream_id="my-stream",
+            location="us-central1",
+            display_name="my stream",
+            source_config={
+                "source_connection_profile": source_connection_profile.id,
+                "mysql_source_config": {},
+            },
+            destination_config={
+                "destination_connection_profile": destination_connection_profile.id,
+                "bigquery_destination_config": {
+                    "source_hierarchy_datasets": {
+                        "dataset_template": {
+                            "location": "us-central1",
+                        },
+                        "project_id": cross_project_dataset.project_id,
+                    },
+                },
+            },
+            backfill_none={})
+        ```
         ### Datastream Stream Bigquery Append Only
 
         ```python
@@ -2190,6 +2294,110 @@ class Stream(pulumi.CustomResource):
             backfill_none={},
             opts = pulumi.ResourceOptions(depends_on=[bigquery_key_user]))
         ```
+        ### Datastream Stream Bigquery Cross Project Source Hierachy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+        import pulumi_random as random
+        import pulumi_time as time
+
+        project = gcp.organizations.get_project()
+        cross_project_dataset = gcp.organizations.Project("cross-project-dataset",
+            project_id="tf-test_79169",
+            name="tf-test_56529",
+            org_id="123456789",
+            billing_account="000000-0000000-0000000-000000",
+            deletion_policy="DELETE")
+        wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
+        opts = pulumi.ResourceOptions(depends_on=[cross_project_dataset]))
+        bigquery = gcp.projects.Service("bigquery",
+            project=cross_project_dataset.project_id,
+            service="bigquery.googleapis.com",
+            disable_on_destroy=False,
+            opts = pulumi.ResourceOptions(depends_on=[wait60_seconds]))
+        datastream_bigquery_admin = gcp.projects.IAMMember("datastream_bigquery_admin",
+            project=cross_project_dataset.project_id,
+            role="roles/bigquery.admin",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-datastream.iam.gserviceaccount.com",
+            opts = pulumi.ResourceOptions(depends_on=[wait60_seconds]))
+        instance = gcp.sql.DatabaseInstance("instance",
+            name="my-instance",
+            database_version="MYSQL_8_0",
+            region="us-central1",
+            settings={
+                "tier": "db-f1-micro",
+                "backup_configuration": {
+                    "enabled": True,
+                    "binary_log_enabled": True,
+                },
+                "ip_configuration": {
+                    "authorized_networks": [
+                        {
+                            "value": "34.71.242.81",
+                        },
+                        {
+                            "value": "34.72.28.29",
+                        },
+                        {
+                            "value": "34.67.6.157",
+                        },
+                        {
+                            "value": "34.67.234.134",
+                        },
+                        {
+                            "value": "34.72.239.218",
+                        },
+                    ],
+                },
+            },
+            deletion_protection=True)
+        db = gcp.sql.Database("db",
+            instance=instance.name,
+            name="db")
+        pwd = random.RandomPassword("pwd",
+            length=16,
+            special=False)
+        user = gcp.sql.User("user",
+            name="user",
+            instance=instance.name,
+            host="%",
+            password=pwd.result)
+        source_connection_profile = gcp.datastream.ConnectionProfile("source_connection_profile",
+            display_name="Source connection profile",
+            location="us-central1",
+            connection_profile_id="source-profile",
+            mysql_profile={
+                "hostname": instance.public_ip_address,
+                "username": user.name,
+                "password": user.password,
+            })
+        destination_connection_profile = gcp.datastream.ConnectionProfile("destination_connection_profile",
+            display_name="Connection profile",
+            location="us-central1",
+            connection_profile_id="destination-profile",
+            bigquery_profile={})
+        default = gcp.datastream.Stream("default",
+            stream_id="my-stream",
+            location="us-central1",
+            display_name="my stream",
+            source_config={
+                "source_connection_profile": source_connection_profile.id,
+                "mysql_source_config": {},
+            },
+            destination_config={
+                "destination_connection_profile": destination_connection_profile.id,
+                "bigquery_destination_config": {
+                    "source_hierarchy_datasets": {
+                        "dataset_template": {
+                            "location": "us-central1",
+                        },
+                        "project_id": cross_project_dataset.project_id,
+                    },
+                },
+            },
+            backfill_none={})
+        ```
         ### Datastream Stream Bigquery Append Only
 
         ```python

pulumi_gcp/discoveryengine/search_engine.py

@@ -27,6 +27,7 @@ class SearchEngineArgs:
                  engine_id: pulumi.Input[_builtins.str],
                  location: pulumi.Input[_builtins.str],
                  search_engine_config: pulumi.Input['SearchEngineSearchEngineConfigArgs'],
+                 app_type: Optional[pulumi.Input[_builtins.str]] = None,
                  common_config: Optional[pulumi.Input['SearchEngineCommonConfigArgs']] = None,
                  industry_vertical: Optional[pulumi.Input[_builtins.str]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None):
@@ -39,6 +40,8 @@ class SearchEngineArgs:
         :param pulumi.Input[_builtins.str] location: Location.
         :param pulumi.Input['SearchEngineSearchEngineConfigArgs'] search_engine_config: Configurations for a Search Engine.
                Structure is documented below.
+        :param pulumi.Input[_builtins.str] app_type: This is the application type this engine resource represents.
+               The supported values: 'APP_TYPE_UNSPECIFIED', 'APP_TYPE_INTRANET'.
         :param pulumi.Input['SearchEngineCommonConfigArgs'] common_config: Common config spec that specifies the metadata of the engine.
                Structure is documented below.
         :param pulumi.Input[_builtins.str] industry_vertical: The industry vertical that the engine registers. The restriction of the Engine industry vertical is based on DataStore: If unspecified, default to GENERIC. Vertical on Engine has to match vertical of the DataStore liniked to the engine.
@@ -53,6 +56,8 @@ class SearchEngineArgs:
         pulumi.set(__self__, "engine_id", engine_id)
         pulumi.set(__self__, "location", location)
         pulumi.set(__self__, "search_engine_config", search_engine_config)
+        if app_type is not None:
+            pulumi.set(__self__, "app_type", app_type)
         if common_config is not None:
             pulumi.set(__self__, "common_config", common_config)
         if industry_vertical is not None:
@@ -133,6 +138,19 @@ class SearchEngineArgs:
     def search_engine_config(self, value: pulumi.Input['SearchEngineSearchEngineConfigArgs']):
         pulumi.set(self, "search_engine_config", value)
 
+    @_builtins.property
+    @pulumi.getter(name="appType")
+    def app_type(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        This is the application type this engine resource represents.
+        The supported values: 'APP_TYPE_UNSPECIFIED', 'APP_TYPE_INTRANET'.
+        """
+        return pulumi.get(self, "app_type")
+
+    @app_type.setter
+    def app_type(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "app_type", value)
+
     @_builtins.property
     @pulumi.getter(name="commonConfig")
     def common_config(self) -> Optional[pulumi.Input['SearchEngineCommonConfigArgs']]:
@@ -177,6 +195,7 @@ class SearchEngineArgs:
 @pulumi.input_type
 class _SearchEngineState:
     def __init__(__self__, *,
+                 app_type: Optional[pulumi.Input[_builtins.str]] = None,
                  collection_id: Optional[pulumi.Input[_builtins.str]] = None,
                  common_config: Optional[pulumi.Input['SearchEngineCommonConfigArgs']] = None,
                  create_time: Optional[pulumi.Input[_builtins.str]] = None,
@@ -191,6 +210,8 @@ class _SearchEngineState:
                  update_time: Optional[pulumi.Input[_builtins.str]] = None):
         """
         Input properties used for looking up and filtering SearchEngine resources.
+        :param pulumi.Input[_builtins.str] app_type: This is the application type this engine resource represents.
+               The supported values: 'APP_TYPE_UNSPECIFIED', 'APP_TYPE_INTRANET'.
         :param pulumi.Input[_builtins.str] collection_id: The collection ID.
         :param pulumi.Input['SearchEngineCommonConfigArgs'] common_config: Common config spec that specifies the metadata of the engine.
                Structure is documented below.
@@ -212,6 +233,8 @@ class _SearchEngineState:
                Structure is documented below.
         :param pulumi.Input[_builtins.str] update_time: Timestamp the Engine was last updated.
         """
+        if app_type is not None:
+            pulumi.set(__self__, "app_type", app_type)
         if collection_id is not None:
             pulumi.set(__self__, "collection_id", collection_id)
         if common_config is not None:
@@ -237,6 +260,19 @@ class _SearchEngineState:
         if update_time is not None:
             pulumi.set(__self__, "update_time", update_time)
 
+    @_builtins.property
+    @pulumi.getter(name="appType")
+    def app_type(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        This is the application type this engine resource represents.
+        The supported values: 'APP_TYPE_UNSPECIFIED', 'APP_TYPE_INTRANET'.
+        """
+        return pulumi.get(self, "app_type")
+
+    @app_type.setter
+    def app_type(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "app_type", value)
+
     @_builtins.property
     @pulumi.getter(name="collectionId")
     def collection_id(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -396,6 +432,7 @@ class SearchEngine(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 app_type: Optional[pulumi.Input[_builtins.str]] = None,
                  collection_id: Optional[pulumi.Input[_builtins.str]] = None,
                  common_config: Optional[pulumi.Input[Union['SearchEngineCommonConfigArgs', 'SearchEngineCommonConfigArgsDict']]] = None,
                  data_store_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
@@ -439,6 +476,29 @@ class SearchEngine(pulumi.CustomResource):
             data_store_ids=[basic.data_store_id],
             search_engine_config={})
         ```
+        ### Discoveryengine Searchengine Agentspace Basic
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        agentspace_basic = gcp.discoveryengine.DataStore("agentspace_basic",
+            location="global",
+            data_store_id="example-datastore-id",
+            display_name="tf-test-structured-datastore",
+            industry_vertical="GENERIC",
+            content_config="NO_CONTENT",
+            solution_types=["SOLUTION_TYPE_SEARCH"],
+            create_advanced_site_search=False)
+        agentspace_basic_search_engine = gcp.discoveryengine.SearchEngine("agentspace_basic",
+            engine_id="example-engine-id",
+            collection_id="default_collection",
+            location=agentspace_basic.location,
+            display_name="tf-test-agentspace-search-engine",
+            data_store_ids=[agentspace_basic.data_store_id],
+            industry_vertical="GENERIC",
+            search_engine_config={})
+        ```
 
         ## Import
 
@@ -466,6 +526,8 @@ class SearchEngine(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[_builtins.str] app_type: This is the application type this engine resource represents.
+               The supported values: 'APP_TYPE_UNSPECIFIED', 'APP_TYPE_INTRANET'.
         :param pulumi.Input[_builtins.str] collection_id: The collection ID.
         :param pulumi.Input[Union['SearchEngineCommonConfigArgs', 'SearchEngineCommonConfigArgsDict']] common_config: Common config spec that specifies the metadata of the engine.
                Structure is documented below.
@@ -520,6 +582,29 @@ class SearchEngine(pulumi.CustomResource):
             data_store_ids=[basic.data_store_id],
             search_engine_config={})
         ```
+        ### Discoveryengine Searchengine Agentspace Basic
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        agentspace_basic = gcp.discoveryengine.DataStore("agentspace_basic",
+            location="global",
+            data_store_id="example-datastore-id",
+            display_name="tf-test-structured-datastore",
+            industry_vertical="GENERIC",
+            content_config="NO_CONTENT",
+            solution_types=["SOLUTION_TYPE_SEARCH"],
+            create_advanced_site_search=False)
+        agentspace_basic_search_engine = gcp.discoveryengine.SearchEngine("agentspace_basic",
+            engine_id="example-engine-id",
+            collection_id="default_collection",
+            location=agentspace_basic.location,
+            display_name="tf-test-agentspace-search-engine",
+            data_store_ids=[agentspace_basic.data_store_id],
+            industry_vertical="GENERIC",
+            search_engine_config={})
+        ```
 
         ## Import
 
@@ -560,6 +645,7 @@ class SearchEngine(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 app_type: Optional[pulumi.Input[_builtins.str]] = None,
                  collection_id: Optional[pulumi.Input[_builtins.str]] = None,
                  common_config: Optional[pulumi.Input[Union['SearchEngineCommonConfigArgs', 'SearchEngineCommonConfigArgsDict']]] = None,
                  data_store_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
@@ -578,6 +664,7 @@ class SearchEngine(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = SearchEngineArgs.__new__(SearchEngineArgs)
 
+            __props__.__dict__["app_type"] = app_type
             if collection_id is None and not opts.urn:
                 raise TypeError("Missing required property 'collection_id'")
             __props__.__dict__["collection_id"] = collection_id
@@ -612,6 +699,7 @@ class SearchEngine(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            app_type: Optional[pulumi.Input[_builtins.str]] = None,
             collection_id: Optional[pulumi.Input[_builtins.str]] = None,
             common_config: Optional[pulumi.Input[Union['SearchEngineCommonConfigArgs', 'SearchEngineCommonConfigArgsDict']]] = None,
             create_time: Optional[pulumi.Input[_builtins.str]] = None,
@@ -631,6 +719,8 @@ class SearchEngine(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[_builtins.str] app_type: This is the application type this engine resource represents.
+               The supported values: 'APP_TYPE_UNSPECIFIED', 'APP_TYPE_INTRANET'.
         :param pulumi.Input[_builtins.str] collection_id: The collection ID.
         :param pulumi.Input[Union['SearchEngineCommonConfigArgs', 'SearchEngineCommonConfigArgsDict']] common_config: Common config spec that specifies the metadata of the engine.
                Structure is documented below.
@@ -656,6 +746,7 @@ class SearchEngine(pulumi.CustomResource):
 
         __props__ = _SearchEngineState.__new__(_SearchEngineState)
 
+        __props__.__dict__["app_type"] = app_type
         __props__.__dict__["collection_id"] = collection_id
         __props__.__dict__["common_config"] = common_config
         __props__.__dict__["create_time"] = create_time
@@ -670,6 +761,15 @@ class SearchEngine(pulumi.CustomResource):
         __props__.__dict__["update_time"] = update_time
         return SearchEngine(resource_name, opts=opts, __props__=__props__)
 
+    @_builtins.property
+    @pulumi.getter(name="appType")
+    def app_type(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        This is the application type this engine resource represents.
+        The supported values: 'APP_TYPE_UNSPECIFIED', 'APP_TYPE_INTRANET'.
+        """
+        return pulumi.get(self, "app_type")
+
     @_builtins.property
     @pulumi.getter(name="collectionId")
     def collection_id(self) -> pulumi.Output[_builtins.str]:

pulumi_gcp/dns/dns_managed_zone_iam_binding.py

@@ -40,6 +40,7 @@ class DnsManagedZoneIamBindingArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `dns.DnsManagedZoneIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -81,6 +82,7 @@ class DnsManagedZoneIamBindingArgs:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -149,6 +151,7 @@ class _DnsManagedZoneIamBindingState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -216,6 +219,7 @@ class _DnsManagedZoneIamBindingState:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -432,6 +436,7 @@ class DnsManagedZoneIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -676,6 +681,7 @@ class DnsManagedZoneIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -730,6 +736,7 @@ class DnsManagedZoneIamBinding(pulumi.CustomResource):
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 

pulumi_gcp/dns/dns_managed_zone_iam_member.py

@@ -40,6 +40,7 @@ class DnsManagedZoneIamMemberArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `dns.DnsManagedZoneIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -81,6 +82,7 @@ class DnsManagedZoneIamMemberArgs:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 
@@ -149,6 +151,7 @@ class _DnsManagedZoneIamMemberState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -216,6 +219,7 @@ class _DnsManagedZoneIamMemberState:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 
@@ -432,6 +436,7 @@ class DnsManagedZoneIamMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -676,6 +681,7 @@ class DnsManagedZoneIamMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -730,6 +736,7 @@ class DnsManagedZoneIamMember(pulumi.CustomResource):
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 

pulumi_gcp/endpoints/consumers_iam_binding.py

@@ -40,6 +40,7 @@ class ConsumersIamBindingArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `endpoints.ConsumersIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -79,6 +80,7 @@ class ConsumersIamBindingArgs:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -146,6 +148,7 @@ class _ConsumersIamBindingState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `endpoints.ConsumersIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -212,6 +215,7 @@ class _ConsumersIamBindingState:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -323,6 +327,7 @@ class ConsumersIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `endpoints.ConsumersIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -464,6 +469,7 @@ class ConsumersIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `endpoints.ConsumersIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -517,6 +523,7 @@ class ConsumersIamBinding(pulumi.CustomResource):
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")